index=activity AND rg_functionality="Next Generation Firewall" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Firewall" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Web Proxy" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Web Application Firewall" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="DNS / DHCP" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND ipaddress NOT NULL AND ipaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Web Proxy" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Web Application Firewall" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="DNS / DHCP" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="IDS / IPS / UTM / Threat Detection" AND destinationaddress NOT NULL AND destinationaddress IN ("27.1.1.34","41.226.2.178","213.152.165.29","213.152.165.30")
index=activity AND rg_functionality="Next Generation Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.ajaxrenew.com")
index=activity AND rg_functionality="Firewall" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.ajaxrenew.com")
index=activity AND rg_functionality="Web Proxy" AND destinationhostname NOT NULL AND (destinationhostname CONTAINS "update.ajaxrenew.com")
